Using the Database To Do Too Much - Implementing Database Security and Auditing - page 207

Table 7.1 Extended stored procedures that provide access to operating system features (continued)

Extended Procedure Description

xp_logevent

Logs a user-defined message in the SQL Server log
file and in the Windows Event Viewer.

xp_loginconfig

Reports the login security configuration of SQL
Server as running on Windows.

xp_logininfo

Reports the account, the type of account, the privi-
lege level of the account, the mapped login name of
the account, and the permission path by which an
account has access to SQL Server.

xp_msver

Returns SQL Server version information. In addi-
tion to version information regarding the actual
build number of the server, various environment
information is also returned—a little too much for
comfort from a security perspective.

xp_ntsecenudomains

Returns the Windows domains to which the host
belongs.

xp_regaddmultistring

Adds a new value to a multivalue string in the regis-
try.

xp_regenumvalues

Returns multiple result sets that list registry values
and data.

xp_regdeletekey

Deletes a specified registry subkey.

xp_regdeletevalue

Deletes a specified registry value.

xp_regremovemultistring

Removes a multistring value from a registry entry.

xp_regwrite

Writes registry values directly from within SQL
Server. This is a very dangerous procedure.

xp_servicecontrol

Allows you to stop, start, pause, and continue Win-
dows services.

xp_subdirs

Similar to xp_dirtree but returns only those directo-
ries that have a depth of 1.

xp_unc_to_drive

Lists details on physical machines, naming, etc.

xp_execresultset

xp_printstatements

xp_displayparamstmt